{
  "cveId": "CVE-2020-14342",
  "url": "https://patchblox.com/security/cve/CVE-2020-14342",
  "summary": "CVE-2020-14342 is fixed in cifs-utils on 1 platform, first by cifs-utils 2:6.8-1ubuntu1.2, released April 27, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "cifs-utils: It was found that cifs-utils\u0027 mount.cifs was invoking a shell whenrequesting the Samba password, which could be used...",
  "description": "It was found that cifs-utils\u0027 mount.cifs was invoking a shell whenrequesting the Samba password, which could be used to inject arbitrarycommands. An attacker able to invoke mount.cifs with special permission,such as via sudo rules, could use this flaw to escalate their privileges.",
  "published": "2020-09-09T05:15:00Z",
  "severity": "Low",
  "epss": 0.00652,
  "epssPercentile": 0.51484,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cifs-utils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2:6.8-1ubuntu1.2",
      "fix": "cifs-utils 2:6.8-1ubuntu1.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cifs-utils-2-6.8-1ubuntu1.2",
      "released": "2022-04-27T18:15:00Z"
    },
    {
      "platform": "linux",
      "product": "cifs-utils",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2:6.9-1ubuntu0.2",
      "fix": "cifs-utils 2:6.9-1ubuntu0.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cifs-utils-2-6.9-1ubuntu0.2",
      "released": "2022-04-27T18:15:00Z"
    },
    {
      "platform": "linux",
      "product": "cifs-utils",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "2:6.11-0ubuntu1",
      "fix": "cifs-utils 2:6.11-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-cifs-utils-2-6.11-0ubuntu1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "cifs-utils",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:6.11-0ubuntu1",
      "fix": "cifs-utils 2:6.11-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-cifs-utils-2-6.11-0ubuntu1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}